Privacy Policy

Information voluntarily provided: You may give us information about you by filling in forms when using our Services, setting up an Account (as defined in the Terms), signing up to our newsletter, enrolling in our text message marketing program (the “Messaging Service”), contacting us with e-mail and other similar inquiries, or responding to surveys that we might ask you to complete. Such information can include:

Identity and contact data: We collect your name, address, email address, and telephone number.

Content You Provide Us: We collect your contributions, text, writings, reviews, responses, comments, suggestions, shopping cart information, order information, survey responses, Submissions (as defined in the Terms), and other material that you voluntarily provide to us or with your consent.

Personal Data We Collect Through Our Social Media Pages: We have pages on social media sites, including but not limited to, Facebook, Instagram, Twitter, Snapchat, Pinterest, YouTube, TikTok, and Twitch (“Social Media Pages”). When you interact with our Social Media Pages, we will collect personal data that you elect to provide to us, such as your contact details. In addition, the companies that host our Social Media Pages may provide us with aggregate information and analytics regarding the use of our Social Media Pages.

Data from Our Service Providers: Our third-party service providers collect certain data to either fulfill the orders and services you request from us or to provide us information about how our Site and Services are used: 

• Our analytics providers automatically collect certain data about you as you use the Site or Services (consistent with our Analytics & Cookie Policy described below).

• Our web host automatically collects certain information when you visit the Site, including IP address, browser type/settings, date and time of the request, and the type of http requests made to the Site. 

• We do not directly collect information necessary for payment processing; rather, our service providers Shopify Payments, PayPal, and Afterpay, and any other service providers we may use from time to time in our sole discretion, directly collect and process that information at our request. However, our service providers may provide us information as necessary to accept, monitor, and track payments. To learn more about how these service providers uses your data, please visit: https://www.shopify.com/legal/privacy

https://www.paypal.com/myaccount/privacy/privacyhub

https://www.afterpay.com/en-US/privacy-policy

The foregoing shall be referred to herein as “Personal Data”. We collect and process this information for purposes based on legitimate business interests, the fulfillment of our agreements with you, compliance with our legal obligations, and/or your consent.

Providing the Services to you as a prospective or existing customer

We may legally use and retain your Personal Data where we need to perform the contract we are about to enter into or have entered into with you, such as:

• Setting up your Account on the Site;
  
• Processing purchases or returns (including any shipping details for delivery or return of the hair products) under our Products, Orders, and Returns section in the Terms; 
• To administer, operate, maintain, and improve the Site and Services by receiving and responding to your orders and service requests, and notifying you when our Site is undergoing maintenance or changing its Terms or Privacy Policy; and
• To comply with legal obligations and protect our rights

In order for you to purchase products via our Site, we currently use the following third-party payment providers (“Payment Provider”) Shopify Payments, PayPal, and Afterpay (all PCI Service Provider Level 1 certified platforms) to collect, store and process payment information from you, including your name, email address, credit card number and bank account details. Our servers will not collect or have access to your payment details. 

Any purchases you make via the Site will also be governed by the Payment Provider’s terms and conditions and/or privacy policies. 

We may contact you via email to remind you about products you left in your shopping basket, that you may want to purchase. We will do this pursuant to our legitimate interests in promoting our business. If you do not wish to be contacted via email please let us know by clicking unsubscribe at the bottom of any email that you receive.

Contacting Us (Your Enquiries) 

If you contact us via our Site, to make an enquiry or otherwise, in certain situations we will ask you to provide a limited amount of Personal Data about yourself, such as your name, email address, and your message or enquiry in the free text box. We will use this information to respond to your enquiries, for example:  

In line with the legitimate interest we have in promoting our business, we will process your enquiries to reply to your query, including providing you with information about the Services we offer and keeping track of your purchase history.

We may also process enquiries to take steps you ask of us with a view to entering into an agreement to provide you with our Services. 

You are under no obligation to provide us with any details, but if you choose to not provide us with relevant information, we may not be able to respond and/or provide the assistance that you request.

Mailing List

If you ask to be added to our mailing list by subscribing to our newsletter, we will keep you updated with information on news, offers, updates on new hair products and events via email through a third party service provider, Mailchimp. 

In line with the legitimate interest we have in promoting our business, we will use the email address you give us via our Site to provide you with this information. If you would like to be removed from that list, please let us know by clicking unsubscribe at the bottom of any marketing email that you receive. After you unsubscribe, you will be removed from our mailing list within a reasonable time.

To find out more about this service provider, please visit: https://mailchimp.com/legal/privacy/

There may also be circumstances where we will ask you for your prior consent in respect of our use of your Personal Data or where we may rely on an alternative lawful basis to process your Personal Data in which case you will be notified at the time.

How You Use our Site (Analytics & Cookie Policy)

This section applies to all information collected through the Site or Services, including the technologies we and third parties with whom we partner, use for automatic data collection. Our Site uses cookies and other mechanisms to collect and log analytical information, to help analyze how visitors use the Site and to compile statistical reports on Site activity. This processing is crucial to the running of our online business.

By way of example but not limitation, we use Google Analytics, Shopify, Swym, Sitewit, Attentive, and may use other third party service providers from time to time in our sole discretion, for analytics and/or sales data. When you visit our Site, these service providers may collect the following data, which will be anonymized and aggregated before reporting back to us:

• Your IP address;
• Demographic information including your age, gender, location, and language preferences;
• Your device or browser information;
• number of visitors to our Site;
• pages visited while at the Site and time spent per page;
• page interaction information, such as scrolling, clicks and browsing methods;
• websites where visitors have come from and where they go afterwards;
• page response times and any download errors; and
• other technical information relating to end user device, such as IP address or browser plug-in.

This analysis is fundamental to the running of our online business and we therefore undertake such monitoring in the pursuit of our legitimate interests in improving our Site, and to provide a better service and source of information to visitors. We also may use these technologies to collect information about your online activities over time and across third-party websites or other online services (behavioral tracking). Click here for information on how you can opt out of behavioral tracking on this website.

Where applicable, we provide you with the option to opt out of the use of cookie feature(s), which will prevent your browser from accepting new cookies, as well as (depending on the sophistication of your browser software) allowing you to decide on acceptance of each new cookie in a variety of ways. In connection with viewing the Site to enable you to take advantage of the most attractive features of the Services, we recommend that you leave cookies active as we believe they will likely improve your experience.

To learn more about your opt-out options, please visit:

https://www.networkadvertising.org/understanding-online-advertising
https://www.allaboutcookies.org/
https://tools.google.com/dlpage/gaoptout

All content you submit to us

If you send us objectionable content or otherwise behave in a disruptive manner when using our Site, we may process Personal Data included in your messages to respond to and stop such behavior.

• We only process Personal Data in this way for the legitimate interests of ensuring that use of our Site is lawful, does not disrupt our systems, does not harass our staff or other individuals, to enforce our legal rights, and to comply with our legal obligations.
• Where we reasonably believe you are or may be in breach of the law (for instance, because content you send amounts to harassment or is defamatory), we may use your Personal Data to inform relevant third parties such as your email/internet provider or law enforcement agencies about the content.

Where we process Personal Data in this way, we will hold that Personal Data on our systems for as long as is reasonably necessary to achieve these objectives, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). 

You can review and change your Personal Data by logging into the Site and visiting your Account profile page.

You may also send us an email at support@xmondohair.com to request access to, review, correct or delete any Personal Data that you have provided to us. We may not be able to delete your Personal Data except by also deleting your Account. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect or for any other permitted exceptions under applicable laws.


We may deny your deletion request if retaining the information is necessary for us or our service provider(s) to:

• Complete the transaction for which we collected the Personal Data, provide a service that you requested, take actions reasonably anticipated within the context of our ongoing business relationship with you;
• Detect security incidents, protect against malicious, deceptive, fraudulent, or illegal activity, or prosecute those responsible for such activities;
• Comply with any state or federal, or other applicable law or regulation;
• Enable solely internal uses that are reasonably aligned with consumer expectations based on your relationship with us;
• Comply with a legal obligation; and/or
• Make other internal and lawful uses of that information that are compatible with the context in which you provided it.

If you delete your Submissions from the Site, copies of your Submissions may remain viewable in cached and archived pages, or might have been copied or stored by other Site users.

You can withdraw your consent to our collection or processing of your Personal Data at any time, including opting out of our sharing information with third parties for cross-contextual behavioral advertising. However, if you withdraw your consent, we may be unable to offer or provide you with certain goods and services. Withdrawing your consent will not affect the lawfulness of any processing we conducted prior to such withdrawal, nor will it affect processing of your Personal Data conducted in reliance on lawful processing grounds other than consent. The Site generally provides you with a reasonable means to view and change your profile information and you can opt-out of marketing communications at any time by clicking on the “unsubscribe” or “opt-out” link in the marketing emails we send you. If you do not want us to use information that we collect or that you provide to us to deliver advertisements according to our advertisers'; target-audience preferences, you can opt-out here. Consent to receive automated marketing text messages is not a condition of any purchase. You can opt-out of receiving further commercial text messages via the Messaging Service by responding to any of our text messages with any of the following replies: STOP, END, CANCEL, UNSUBSCRIBE, or QUIT. If you have any questions or comments about the processing of your Personal Data, you may contact us at: support@xmondohair.com

You have the following rights over the way we process Personal Data relating to you. We aim to comply without undue delay, and within one month at the latest, in response to any requests submitted by you to us:

• for a copy of Personal Data we are processing about you and/or to have inaccuracies corrected;
• to restrict, stop processing, or to delete your Personal Data;
• for a machine-readable copy of your Personal Data, which you can use with another service provider. Where it is technically feasible, you can ask us to send this information directly to another provider if you prefer; and
• for EU residents, to make a complaint to a data protection regulator. If you are a resident of the EEA, you can find your local regulator’s contact details here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

To make a request in relation to any of the aforementioned rights, please send your requests to support@xmondohair.com. We will not deny you goods or services, charge you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties, provide you a different level or quality of goods or services, or suggest that you may receive a different price or rate for goods or services or a different level or quality of goods or services. Only you, or someone legally authorized to act on your behalf, may make a verifiable consumer request related to your Personal Data. You may also make a verifiable consumer request on behalf of your minor child (anyone under the age of 18). We cannot respond to your request or provide you with Personal Data if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you.

Additionally, Nevada law (SB §220) requires website operators to provide a way for Nevada consumers to opt out of the sale of certain information that the website operator may collect about them. XMONDO does not sell your Personal Data to third parties as defined in Nevada law, and will not do so in the future without providing you with notice and an opportunity to opt-out of such sale as required by law.